Some references:
You store your macro in a macro-enabled template. You store any keyboard shortcuts or QAT modifications to access the macro in the same template. That template is placed in the user's Startup Folder. The macro is available then to all documents for that user. This assumes that the Startup folder is a "trusted location."